Privacy and cookie policy

This Privacy and Cookies Policy defines the principles of processing and protection of personal data and the use of cookies and other technologies such as Google Analytics, Facebook Pixel in connection with the use by Users of the Website and social media profiles maintained by the Administrator.

§1. Definitions

For the purposes of this privacy policy, the following terms have the following meanings:

  1. Administrator – Nu Du Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, ul. Dolna 14/16/18 lok. 60, 00-774 Warsaw, entered into the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under the KRS number: 0000988511, NIP: 701-110-23-57, REGON: 522901130, share capital of PLN 5,000 (hereinafter referred to as “Nu Du”).
  2. Website – service available at nudu.pl.
  3. User – any entity that views the contents of the Website.
  4. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

§2. Personal data

  1. The administrator of the User's personal data within the meaning of the GDPR is the Administrator.
  2. The Administrator processes user data for specific purposes and on a legal basis, which may be the voluntary, specific, informed and unambiguous consent of the User expressed, for example, by means of an appropriate form on the Website. Users' personal data may also be processed in cases where the Administrator is obliged to process personal data on the basis of legal regulations or for the purpose of implementing an agreement concluded between the parties, as well as on the basis of a legally justified interest pursued by the administrator.
  3. The User may provide his/her personal data to the Administrator, among others, using forms available on the Website, as well as solutions such as instant messengers and social media profiles, in particular:
    1. [ORDER FORM]
      Personal data provided to the Administrator by the User as part of the order form are processed for the purpose of performing the contract concluded via the Store or the Website. This contract is the legal basis for processing (Article 6, paragraph 1, letter b of the GDPR). Providing personal data by the User is voluntary, but necessary for the User to be able to conclude an agreement with the Administrator. This data will be processed for the duration of the order and the performance of the statutory obligations incumbent on the administrator (e.g. tax and accounting), as well as in the event of claims.  
    1. [NEWSLETTER SUBSCRIPTION FORM]
      Personal data provided to the Administrator by the User as part of the newsletter subscription form are processed for the purpose of providing the newsletter service containing information about new products and selected offers. Providing personal data by the User is voluntary, but necessary for the User to be able to subscribe and receive the newsletter. Data processing is carried out on the basis of a contract (legal basis art. 6 sec. 1 letter b GDPR) concluded using the newsletter subscription form. The User may terminate the contract by unsubscribing according to the instructions included in each Newsletter or by sending an appropriate statement to the Administrator's email address.
    1. [CONTACT FORM]
      Personal data provided to the Administrator by the User as part of the contact form or in an email sent to the Administrator's address provided on the Website are processed in order to respond to the sent inquiry. Providing personal data by the User is voluntary, but necessary for the User to receive a response. Data processing for this purpose is based on the legitimate interest pursued by the administrator (Article 6, paragraph 1, letter f of the GDPR). This data will be processed until the correspondence is completed and until any claims are time-barred.
    1. [SOCIAL MEDIA AND INTERNET COMMUNICATIONS]
      Personal data provided to the Administrator by the User as part of their social media profiles or messages sent via instant messengers are processed in order to respond to the sent query. Providing personal data by the User is voluntary, but necessary for the User to receive a response. Data processing for this purpose is based on the legitimate interest pursued by the administrator (Article 6 section 1 letter f of the GDPR). This data will be processed until the correspondence is completed and until any claims are time-barred.
  4. The Administrator may entrust personal data to other entities with the help of which it realizes the purposes indicated in the previous points (e.g. companies providing hosting services, an accounting firm, a company providing an emailing application, an SMS service provider, etc.).
  5. The User's personal data will not be transferred to recipients from third countries or international organizations that do not provide an adequate level of protection. The adequate level of protection must be confirmed by an appropriate decision of the European Commission or another binding legal instrument.
  6. The Administrator guarantees the confidentiality of all personal data provided to him.
  7. Personal data are collected with due diligence and appropriately protected against access by unauthorized persons, and their processing is carried out in accordance with and under the conditions specified in detail in:
    1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC,
    1. Act of 18 July 2002 on the provision of services by electronic means,
    1. Act of 10 May 2018 on the protection of personal data.

§3. User Rights

  1. The User has rights related to the processing of his/her personal data, including:
  2. the right to access data
  3. the right to rectify data
  4. the right to restrict data processing
  5. the right to object to data processing
  6. the right to delete data (the so-called right to be forgotten)
  7. the right to transfer data
  8. the right to lodge a complaint with the supervisory authority in connection with the processing of personal data by the Administrator
  9. The User has the right to withdraw his/her consent at any time if the User has previously given it.  
  10. In order to exercise his/her rights, the User should send an appropriate request to the following address: hello@nudu.pl.

§4. Cookies and other information

  1. When the User uses the Website, data concerning the User is automatically collected. This data includes, among others: IP address, domain name, browser type, operating system type. This data may be collected by cookies (so-called cookies) and may also be saved in server logs.
  2. Cookies are files sent to the User's computer or other device (e.g. laptop, smartphone, tablet) and saved there while browsing the Website. Cookies remember the User's preferences and behavior, which allows for improving the quality of services provided, improving search results and the accuracy of displayed information, including advertisements, and anonymous tracking of User preferences.
  3. The current list of cookies used on the Website is available via the cookie bar provided on the Website. 
  4. The User may express consent to the use of cookies on their end device using the cookie bar provided on the Website. They may also do so using the browser settings installed on the User's device. In the same way, the User may withdraw their consent or change its scope at any time.
  5. The User may also delete existing cookies from his/her device using the appropriate functions of the web browser, programs designed for this purpose or tools available within the operating system used by the User.
  6. Data saved in server logs or via cookies are not linked by the Administrator in any way to specific Users of the Website and are not used by him to identify the User. Server logs are used to administer the Website, and their content is not disclosed to anyone other than those authorized to administer the server.
  • The Website uses recording technologies anonymously actions taken by the User when using the Website. These include:
    • Google Analytics – used to analyze Website statistics
    • Facebook Pixel – used to manage and optimize advertising on Facebook
  • Data obtained by these tools are not linked in any way to specific Users of the Website and are not used by the Administrator to identify the User.
  • The consequence of using the technologies listed in § 3 point 7 will be the optimization of the Website, its content and offer to the needs of the User.

§5. Purpose of data use

The Administrator uses data provided by the User or collected automatically for the purpose of:

  1. proper functioning, configuration and security of the Website,
    1. monitoring session status,
    1. analysis, research and audit of Website views,
    1. and also for statistical and marketing purposes.

§6. Final provisions

  1. This document may undergo changes that may be affected by the development of Internet technology, changes in the law on personal data protection and the development of our Website and Store. Any changes will be communicated to Users immediately in a visible and understandable manner.
  2. Please send any questions or comments regarding the Privacy Policy and Cookies to: hello@nudu.pl.